Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jboss operations network vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2016-6330
The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows remote malicious users to execute arbitrary code via a crafted HTTP request, related to message deserialization. NOTE: this vulnerability e...
Redhat Jboss Operations Network 3.0Redhat Jboss Operations Network 3.3.4Redhat Jboss Operations Network 3.3.5Redhat Jboss Operations Network 3.1Redhat Jboss Operations Network 3.3.2Redhat Jboss Operations Network 3.2.0Redhat Jboss Operations Network 3.2.2Redhat Jboss Operations Network 3.0.1Redhat Jboss Operations Network 3.2.3Redhat Jboss Operations Network 3.1.2Redhat Jboss Operations Network 3.3.1Redhat Jboss Operations Network 3.2.1Redhat Jboss Operations Network 3.1.1Redhat Jboss Operations Network 3.3.6Redhat Jboss Operations Network 3.1.4Redhat Jboss Operations Network 3.3.3
NA
CVE-2012-0052
Red Hat JBoss Operations Network (JON) prior to 2.4.2 and 3.0.x prior to 3.0.1 does not check the JON agent key, which allows remote malicious users to spoof the identity of arbitrary agents via the registered agent name.
Redhat Jboss Operations NetworkRedhat Jboss Operations Network 2.4Redhat Jboss Operations Network 2.3.1Redhat Jboss Operations Network 2.3Redhat Jboss Operations Network 2.2Redhat Jboss Operations Network 2.1.0Redhat Jboss Operations Network 2.0.0Redhat Jboss Operations Network 3.0Redhat Jboss Operations Network 2.0.1
NA
CVE-2012-1100
Red Hat JBoss Operations Network (JON) 3.0.x prior to 3.0.1, 2.4.2, and previous versions, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote malicious users to login to LDAP-based accounts via an arbitrary password in a login req...
Redhat Jboss Operations Network 3.0Redhat Jboss Operations NetworkRedhat Jboss Operations Network 2.0.1Redhat Jboss Operations Network 2.0.0Redhat Jboss Operations Network 2.4Redhat Jboss Operations Network 2.3Redhat Jboss Operations Network 2.1.0Redhat Jboss Operations Network 2.3.1Redhat Jboss Operations Network 2.2
NA
CVE-2011-4573
Red Hat JBoss Operations Network (JON) prior to 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from be...
Redhat Jboss Operations NetworkRedhat Jboss Operations Network 2.3.1Redhat Jboss Operations Network 2.4Redhat Jboss Operations Network 2.3Redhat Jboss Operations Network 2.2Redhat Jboss Operations Network 2.1.0Redhat Jboss Operations Network 2.0.1Redhat Jboss Operations Network 2.0.0Redhat Jboss Operations Network 1.0.0
NA
CVE-2012-0062
Red Hat JBoss Operations Network (JON) prior to 2.4.2 and 3.0.x prior to 3.0.1 allows remote malicious users to hijack agent sessions via an agent registration request without a security token.
Redhat Jboss Operations Network 2.0.0Redhat Jboss Operations Network 3.0Redhat Jboss Operations NetworkRedhat Jboss Operations Network 2.4Redhat Jboss Operations Network 2.3.1Redhat Jboss Operations Network 2.2Redhat Jboss Operations Network 2.0.1Redhat Jboss Operations Network 2.3Redhat Jboss Operations Network 2.1.0
NA
CVE-2011-3206
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) prior to 3.0, allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Redhat Jboss Operations Network 2.1.0Redhat Jboss Operations Network 2.0.0Rhq-project Rhq 4.2.0Redhat Jboss Operations Network 2.0.1Redhat Jboss Operations NetworkRedhat Jboss Operations Network 2.3Redhat Jboss Operations Network 2.2Redhat Jboss Operations Network 2.4Redhat Jboss Operations Network 2.3.1
6.5
CVSSv3
CVE-2008-5083
In JON 2.1.x prior to 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.
Redhat Jboss Operations NetworkRedhat Jboss Operations Network 2.1.2
8
CVSSv3
CVE-2010-0737
A missing permission check was found in The CLI in JBoss Operations Network prior to 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.
Redhat Jboss Operations Network
9.8
CVSSv3
CVE-2016-3737
The server in Red Hat JBoss Operations Network (JON) prior to 3.3.6 allows remote malicious users to execute arbitrary code via a crafted HTTP request, related to message deserialization.
Redhat Jboss Operations Network
NA
CVE-2015-3267
Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations Network prior to 3.3.3 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.
Redhat Jboss Operations Network
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook